Netscout Ngeniusone — known CVE vulnerabilities

Every CVE whose affected-product data names Netscout Ngeniusone, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (36)

• CVE-2025-32985 — CVSS 9.8 (critical): NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.
• CVE-2023-26999 — CVSS 9.8 (critical): An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a…
• CVE-2021-45981 — CVSS 9.8 (critical): NetScout nGeniusONE 6.3.2 allows an XML External Entity (XXE) attack.
• CVE-2021-45983 — CVSS 9.8 (critical): NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution.
• CVE-2021-45982 — CVSS 8.8 (high): NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user.
• CVE-2022-44715 — CVSS 8.8 (high): Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted…
• CVE-2025-32986 — CVSS 7.5 (high): NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint.
• CVE-2025-32983 — CVSS 7.5 (high): NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace.
• CVE-2025-32982 — CVSS 7.5 (high): NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.
• CVE-2025-32981 — CVSS 7.1 (high): NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File.
• CVE-2021-35201 — CVSS 6.5 (medium): NEI in NETSCOUT nGeniusONE 6.3.0 build 1196 allows XML External Entity (XXE) attacks.
• CVE-2025-32979 — CVSS 6.5 (medium): NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.
• CVE-2022-44024 — CVSS 6.1 (medium): An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 1 of 6.
• CVE-2023-41170 — CVSS 6.1 (medium): NetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability.
• CVE-2023-27000 — CVSS 6.1 (medium): Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name…
• CVE-2022-44025 — CVSS 6.1 (medium): An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 2 of 6.
• CVE-2022-44026 — CVSS 6.1 (medium): An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 3 of 6.
• CVE-2022-44027 — CVSS 6.1 (medium): An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 4 of 6.
• CVE-2022-44028 — CVSS 6.1 (medium): An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 5 of 6.
• CVE-2022-44029 — CVSS 6.1 (medium): An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 6 of 6.
• CVE-2025-32984 — CVSS 6.1 (medium): NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter.
• CVE-2021-35203 — CVSS 5.7 (medium): NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Arbitrary File Read operations via the FDSQueryService endpoint.
• CVE-2021-35198 — CVSS 5.4 (medium): NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting (XSS) in the Packet Analysis module.
• CVE-2021-35199 — CVSS 5.4 (medium): NETSCOUT nGeniusONE 6.3.0 build 1196 and earlier allows Stored Cross-Site Scripting (XSS) in UploadFile.
• CVE-2021-35204 — CVSS 5.4 (medium): NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Reflected Cross-Site Scripting (XSS) in the support endpoint.
• CVE-2021-35205 — CVSS 5.4 (medium): NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 allows URL redirection in redirector.
• CVE-2023-26998 — CVSS 5.4 (medium): Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator…
• CVE-2023-41168 — CVSS 5.4 (medium): NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 1 of 4).
• CVE-2023-41169 — CVSS 5.4 (medium): NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 2 of 4).
• CVE-2023-41171 — CVSS 5.4 (medium): NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 3 of 4).
• CVE-2023-41172 — CVSS 5.4 (medium): NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 4 of 4).
• CVE-2023-41905 — CVSS 5.4 (medium): NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability by an authenticated user.
• CVE-2021-35200 — CVSS 4.8 (medium): NETSCOUT nGeniusONE 6.3.0 build 1196 allows high-privileged users to achieve Stored Cross-Site Scripting (XSS) in FDSQueryService.
• CVE-2021-35202 — CVSS 4.3 (medium): NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Authorization Bypass (to access an endpoint) in FDSQueryService.
• CVE-2022-44718 — CVSS 3.5 (low): An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 2 of 2). After successful login, an…
• CVE-2022-44717 — CVSS 3.1 (low): An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 1 of 2). After successful login, an…